[SECURITY] Fedora 32 Update: cups-2.3.1-9.fc32
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-ebd2ffb92c
2020-04-28 02:30:07.995659
--------------------------------------------------------------------------------
Name : cups
Product : Fedora 32
Version : 2.3.1
Release : 9.fc32
URL : http://www.cups.org/
Summary : CUPS printing system
Description :
CUPS printing system provides a portable printing layer for
UNIX�� operating systems. It has been developed by Apple Inc.
to promote a standard printing solution for all UNIX vendors and users.
CUPS provides the System V and Berkeley command-line interfaces.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2020-3898 ---- 1822154 - cups.service doesn't execute
automatically on request
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 21 2020 Zdenek Dohnal <zdohnal(a)redhat.com> - 1:2.3.1-9
- 1826330 - CVE-2020-3898 cups: heap based buffer overflow in libcups's
ppdFindOption() in ppd-mark.c
* Wed Apr 8 2020 Zdenek Dohnal <zdohnal(a)redhat.com> - 1:2.3.1-8
- 1822154 - cups.service doesn't execute automatically on request
* Mon Apr 6 2020 Zdenek Dohnal <zdohnal(a)redhat.com> - 1:2.3.1-7
- make avahi and nss-mdns recommended in main package - so users with older printers
can install cups without it
* Fri Mar 20 2020 Zdenek Dohnal <zdohnal(a)redhat.com> - 1:2.3.1-6
- add requires on nss-mdns, because getaddrinfo needs it for resolving .local addresses
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1823964 - CVE-2020-3898 cups: heap based buffer overflow in libcups's
ppdFindOption() in ppd-mark.c
https://bugzilla.redhat.com/show_bug.cgi?id=1823964
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-ebd2ffb92c' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------